Identity and SSO
What it costs to self-host authentik
The authentication glue you need. Below is the server it needs at each team size, what that costs, and how long the 3 commercial products it replaces would take to cost more.
| Team size | Memory | Disk | Cheapest plan that fits | Server | With backups and your time |
|---|---|---|---|---|---|
| solo | 2.5 GB | 10 GB | CX23 (cost-optimized) · Hetzner Cloud | $6.70 | $121 |
| 5 people | 2.5 GB | 10.1 GB | CX23 (cost-optimized) · Hetzner Cloud | $6.70 | $121 |
| 10 people | 2.5 GB | 10.1 GB | CX23 (cost-optimized) · Hetzner Cloud | $6.70 | $121 |
| 25 people | 2.6 GB | 10.2 GB | CX23 (cost-optimized) · Hetzner Cloud | $6.70 | $121 |
| 50 people | 2.7 GB | 10.5 GB | CX23 (cost-optimized) · Hetzner Cloud | $6.70 | $121 |
| 100 people | 2.9 GB | 11 GB | CX23 (cost-optimized) · Hetzner Cloud | $6.70 | $121 |
| 250 people | 3.4 GB | 12.5 GB | CX23 (cost-optimized) · Hetzner Cloud | $6.70 | $121 |
The sizing model for authentik
Server plus worker, PostgreSQL and Redis. Friendlier than Keycloak for proxy-style protection of apps that have no native SSO support.
- 2 GB of memory for the whole stack at rest, every container the project ships included.
- 3 MB more per active user, then 25% on top so the box is not running at its ceiling.
- 10 GB of disk to begin with, growing 0.01 GB per user.
- 2 vCPU. Carried through from the project's baseline and not scaled with team size, because for this workload memory is what runs out first.
These base figures come from the project's own documented requirements. The per-user increments are ours in every case. They are deliberately generous rather than optimistic: a comparison that undersizes the server flatters self-hosting.
Time, not just money
authentik is rated medium to operate, which in this model means about 6 hours to get it running properly the first time and 1.5 hours a month after that. At $75 an hour that is $450 once and $112 a month, which is usually the largest line in the whole calculation.
What it replaces
| Commercial product | Its cost at 10 people | authentik at 10 people | Break-even | |
|---|---|---|---|---|
| Auth0 Essentials (B2B) | $150 | $121 | 15 months | full breakdown |
| Okta Workforce Identity Starter | $125 | $121 | 8.4 years | full breakdown |
| Clerk Pro | $25.00 | $121 | never | full breakdown |
Where to put authentik
2.5 GB of memory and 10.1 GB of disk is what this needs at 10 people. The cheapest plan that fits, among the providers whose prices we have read ourselves, is the CX23 (cost-optimized) at Hetzner Cloud for $6.70 a month.
Go to Hetzner Cloud Compare hosts
We are not claiming this is the cheapest server on the internet. It is the cheapest one we can honestly quote. Vultr and PikaPods publish prices we could not read programmatically, and may well undercut it. Price them yourself before you commit.
Project facts
| Licence | Other not a standard open-source licence |
|---|---|
| Written in | Python |
| GitHub stars | 25,446 |
| Open issues | 1,073 |
| Latest release | version/2026.8.2 |
| Last commit | 2026-09-12 |
| Repository checked | 2026-09-12 |
| Project | goauthentik.io · goauthentik/authentik |
Get the migration checklist for this tool
A one-page pre-flight list: data export path, sizing, backup plan, and the rollback step most people skip.